$ rpki-client -vvf rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft File: 8R8km4Id_MKxuXr05wUm3ZM6En0.mft (raw, json) Hash identifier: 9xbM15b/dLbtyxe/yyqvXfvWHRBengW1jWzOuBsvfW8= Subject key identifier: 0D:20:45:24:80:45:75:EA:DC:20:9C:B3:95:40:C9:77:41:4E:F5:56 Authority key identifier: F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D Certificate issuer: /CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft Manifest number: 81 Signing time: Fri 17 May 2024 07:19:30 +0000 Manifest this update: Fri 17 May 2024 07:19:29 +0000 Manifest next update: Fri 24 May 2024 07:19:29 +0000 Files and hashes: 1: 8R8km4Id_MKxuXr05wUm3ZM6En0.crl (hash: KvAXKmrXS+KOLmWn/odu8g6MsnuRhwSGO0mNK2npLQ8=) 2: 3D870D1C685F11EEA29D9F4BC4F9AE02.roa (hash: Qz5iGzyNOrGCX937jX4aRAOwunW0lhpKpg9tUyKFo7U=) 3: BA536126685D11EE8F1C1849C4F9AE02.roa (hash: TeOT08pZdJKZYXgJoC3uQ37VY/ZhoZkFKgmuL0OEmdg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:19:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Validity Not Before: May 17 07:19:29 2024 GMT Not After : May 24 07:19:29 2024 GMT Subject: CN=66470502-32ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b5:05:a6:89:a2:56:9d:53:43:35:be:48:f4: 68:5d:61:57:ba:5b:3b:d3:9c:f2:16:a1:3b:74:8d: 9a:aa:c7:58:9e:03:90:80:fe:b0:63:5f:59:0d:4e: 05:6d:f0:18:7f:e8:86:bf:14:f4:fd:c9:e8:39:5f: db:47:e9:26:87:5e:b0:d5:35:cb:68:79:e3:4e:e1: bc:36:06:39:f4:f1:6f:c1:75:41:79:e1:67:3b:57: f5:e0:df:64:cd:8c:9d:22:1e:80:69:95:17:f8:8a: 88:2a:fc:50:2e:f9:d8:7a:61:2e:7e:d8:05:52:ef: d3:18:85:c4:3d:10:e5:18:1e:48:78:7a:8f:51:80: 2f:f7:6d:f6:71:8b:a9:d7:b1:a3:fc:74:b3:97:d8: ad:28:e4:af:da:07:ec:0a:2a:1e:af:22:ac:2e:c9: 9b:2a:e6:c7:65:16:cb:09:3e:70:43:5f:a9:f4:64: 79:0a:d5:bf:0d:be:3a:1b:fa:3c:7b:58:ff:38:ce: 2e:d5:84:73:46:9d:9e:22:05:a6:64:bc:1a:ea:35: b9:75:ea:15:37:0f:76:e8:e6:89:8d:e3:8f:37:52: b9:58:c3:65:11:93:5c:4d:13:7c:97:a8:04:49:dd: ea:c6:0c:cc:44:8f:8c:8d:d2:15:03:0b:b7:91:5f: 55:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:20:45:24:80:45:75:EA:DC:20:9C:B3:95:40:C9:77:41:4E:F5:56 X509v3 Authority Key Identifier: keyid:F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:b6:bb:e5:1a:67:77:86:16:e7:05:de:aa:2a:60:40:cc:49: eb:54:b9:52:9e:3b:56:58:08:0d:34:7c:83:cf:ce:78:af:c4: 9e:11:53:71:2e:28:7d:fb:50:da:b3:6a:c1:59:52:69:3b:aa: d9:33:a4:eb:26:e2:8a:a9:28:0c:13:6b:6b:20:01:1f:d4:1e: cd:59:02:8f:2c:88:29:47:f3:74:0a:f0:20:90:46:47:72:ce: bd:2f:7c:ba:51:37:fb:8b:0e:e2:da:bf:d4:08:11:a1:46:26: 88:3f:f6:01:62:fe:5c:5b:e3:34:d2:7c:ae:49:94:11:c6:1d: 21:3d:f3:95:61:76:a5:25:ae:5a:01:1c:38:ef:1b:07:ff:c7: d8:69:2f:d6:f9:8d:0e:90:45:db:50:7a:fb:d1:45:87:8c:0b: a8:9b:0a:9a:4b:5b:60:bf:2f:dd:60:e1:ea:6e:81:68:7a:d1: 0b:cd:88:6a:1e:04:b6:76:3c:51:1d:19:d9:6d:dd:2d:dd:dd: 60:6f:56:e7:ed:54:84:11:ff:97:43:f2:8c:0b:b3:bc:60:83: b5:a2:70:fa:14:a9:4f:23:0d:22:49:ed:93:cb:4e:79:ef:60: ad:30:9b:f1:68:d5:68:36:6d:09:74:4f:9a:76:51:08:31:c5: 18:4e:e4:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZGMjUxMTAvBgNVBAUTKEYxMUYyNDlCODIxREZDQzJCMUI5N0FGNEU3MDUyNkRE OTMzQTEyN0QwHhcNMjQwNTE3MDcxOTI5WhcNMjQwNTI0MDcxOTI5WjAYMRYwFAYD VQQDEw02NjQ3MDUwMi0zMmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLUFpomiVp1TQzW+SPRoXWFXuls705zyFqE7dI2aqsdYngOQgP6wY19ZDU4F bfAYf+iGvxT0/cnoOV/bR+kmh16w1TXLaHnjTuG8NgY59PFvwXVBeeFnO1f14N9k zYydIh6AaZUX+IqIKvxQLvnYemEuftgFUu/TGIXEPRDlGB5IeHqPUYAv9232cYup 17Gj/HSzl9itKOSv2gfsCioeryKsLsmbKubHZRbLCT5wQ1+p9GR5CtW/Db46G/o8 e1j/OM4u1YRzRp2eIgWmZLwa6jW5deoVNw926OaJjeOPN1K5WMNlEZNcTRN8l6gE Sd3qxgzMRI+MjdIVAwu3kV9VDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA0gRSSA RXXq3CCcs5VAyXdBTvVWMB8GA1UdIwQYMBaAFPEfJJuCHfzCsbl69OcFJt2TOhJ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkYyNS82MDY0QkFCMjUy RjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9NS3h1WHIwNXdVbTNaTTZF bjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSOGttNElkX01LeHVYcjA1d1VtM1pNNkVuMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkYyNS82MDY0QkFCMjUyRjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9N S3h1WHIwNXdVbTNaTTZFbjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmtrvlGmd3hhbnBd6qKmBAzEnrVLlSnjtWWAgNNHyDz854r8SeEVNx Lih9+1Das2rBWVJpO6rZM6TrJuKKqSgME2trIAEf1B7NWQKPLIgpR/N0CvAgkEZH cs69L3y6UTf7iw7i2r/UCBGhRiaIP/YBYv5cW+M00nyuSZQRxh0hPfOVYXalJa5a ARw47xsH/8fYaS/W+Y0OkEXbUHr70UWHjAuomwqaS1tgvy/dYOHqboFoetELzYhq HgS2djxRHRnZbd0t3d1gb1bn7VSEEf+XQ/KMC7O8YIO1onD6FKlPIw0iSe2Ty055 72CtMJvxaNVoNm0JdE+adlEIMcUYTuTc -----END CERTIFICATE-----Generated at Fri May 17 08:13:47 2024 by rpki-client on console-fra.rpki-client.org